$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c74fa-40bb-395a-9084-ae3d833f5bf1.roa File: 224c74fa-40bb-395a-9084-ae3d833f5bf1.roa (raw, json) Hash identifier: pRQcX4F5xyCIjToynKGmReg228osyXW0fs6qJEJo3hU= Subject key identifier: F5:5D:16:DD:92:3F:DF:B0:00:23:18:65:51:7F:B2:4D:A8:06:41:10 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5884E935428C85BBA76C57E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c74fa-40bb-395a-9084-ae3d833f5bf1.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 834 IP address blocks: 69.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e9:35:42:8c:85:bb:a7:6c:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=e1a0f995-add4-4368-aca6-996a4d675ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:69:67:67:63:57:81:47:fa:d6:1c:c0:04:16: cd:30:c9:82:fe:f6:20:62:38:5a:62:80:32:5d:5d: ec:22:4f:77:32:36:f1:de:5b:4d:27:31:1d:71:23: 81:05:03:3b:7b:c9:49:b4:e1:7d:fb:70:1e:3e:5a: f0:9e:18:75:0b:84:51:ae:dd:14:d2:3f:b8:20:6f: 1d:29:67:b7:70:77:1a:b6:84:45:e1:56:33:db:f6: 89:cc:f0:9b:cd:83:86:f7:9b:27:1d:8f:c9:52:88: a7:e9:ea:4a:b5:9d:23:07:18:b5:fa:73:57:53:a7: cb:fa:83:3d:53:8e:42:9d:c4:7c:ce:9e:04:42:68: 49:bf:ea:1e:11:4e:ff:a0:b5:e6:bc:92:58:ee:32: 81:fd:03:f9:9d:6b:4e:cd:9d:07:03:b1:bf:2a:38: 1c:ff:10:6c:22:46:90:88:c1:e4:07:88:d3:38:20: 01:58:fd:87:c0:cf:64:e7:c0:06:9a:47:e3:38:be: e3:f0:37:73:a3:df:09:d7:7d:72:9b:1d:71:8b:27: d0:8c:a2:d5:27:02:da:33:b2:e8:a2:9d:e5:77:b1: f8:4c:91:6e:2e:d5:e1:fe:b7:86:57:a3:43:5e:2c: 0d:9d:9a:f6:78:cb:77:8a:97:24:6f:c8:c5:68:c4: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5D:16:DD:92:3F:DF:B0:00:23:18:65:51:7F:B2:4D:A8:06:41:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c74fa-40bb-395a-9084-ae3d833f5bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e4:64:75:12:e5:73:f2:8c:1e:a2:af:78:05:79:85:52:1c: 23:fb:e1:c2:bb:a0:b4:c5:2f:73:47:50:8f:88:37:b7:aa:f0: 0d:92:fe:e8:eb:ae:72:58:cd:65:e8:a0:73:3f:a2:b4:87:4c: bf:be:2d:15:b7:67:04:38:e5:64:78:33:3b:f6:03:3f:88:90: d9:c2:0e:63:b2:40:ea:2f:ca:88:ef:05:eb:55:7c:94:19:f5: 76:47:cf:57:a7:b7:db:c2:76:80:bb:a8:10:be:62:3a:07:2c: e3:b6:9d:00:87:d7:83:a9:86:1e:df:6f:1d:0c:3d:55:ee:a4: 27:2e:29:2a:09:98:7c:66:47:db:e6:5c:97:53:13:54:48:bd: 38:9c:25:02:14:34:9d:f6:4a:89:bc:f4:ce:6f:47:31:4e:60: f0:c8:c5:9d:18:8e:a9:3b:58:af:9d:cf:7b:d0:b4:1a:bd:c4: e6:16:8a:fd:85:70:eb:bd:42:15:0f:19:76:39:6f:2e:c7:1c: 47:0f:da:09:4e:e7:15:df:e8:e2:a4:a0:be:d6:ba:a7:e3:c0: e1:94:f0:06:20:02:e5:28:22:9d:c1:04:50:ca:67:f7:bb:27: 4f:3f:ad:f7:d0:a5:bf:61:86:16:9d:5a:f0:92:f5:54:d1:e6: 65:ce:f9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOk1QoyFu6dsV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ZTFhMGY5OTUtYWRkNC00MzY4LWFjYTYtOTk2YTRkNjc1Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mlnZ2NXgUf61hzABBbNMMmC/vYgYjhaYoAy XV3sIk93Mjbx3ltNJzEdcSOBBQM7e8lJtOF9+3AePlrwnhh1C4RRrt0U0j+4IG8d KWe3cHcatoRF4VYz2/aJzPCbzYOG95snHY/JUoin6epKtZ0jBxi1+nNXU6fL+oM9 U45CncR8zp4EQmhJv+oeEU7/oLXmvJJY7jKB/QP5nWtOzZ0HA7G/Kjgc/xBsIkaQ iMHkB4jTOCABWP2HwM9k58AGmkfjOL7j8Ddzo98J131ymx1xiyfQjKLVJwLaM7Lo op3ld7H4TJFuLtXh/reGV6NDXiwNnZr2eMt3ipckb8jFaMSnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVdFt2SP9+wACMYZVF/sk2oBkEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjI0Yzc0ZmEtNDBiYi0z OTVhLTkwODQtYWUzZDgzM2Y1YmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7kZHUS5XPyjB6ir3gFeYVSHCP74cK7oLTFL3NHUI+IN7eq8A2S/ujr rnJYzWXooHM/orSHTL++LRW3ZwQ45WR4Mzv2Az+IkNnCDmOyQOovyojvBetVfJQZ 9XZHz1ent9vCdoC7qBC+YjoHLOO2nQCH14Ophh7fbx0MPVXupCcuKSoJmHxmR9vm XJdTE1RIvTicJQIUNJ32Som89M5vRzFOYPDIxZ0Yjqk7WK+dz3vQtBq9xOYWiv2F cOu9QhUPGXY5by7HHEcP2glO5xXf6OKkoL7WuqfjwOGU8AYgAuUoIp3BBFDKZ/e7 J08/rffQpb9hhhadWvCS9VTR5mXO+RM= -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:47 2026 by rpki-client